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DETAILED ACTION 

1 . Applicant's amendment submitted on January 24. 2005 with respect to claims 1 - 
20 and newly added claims 21-25 has been acknowledged. 

Applicant's amendment necessitated the new ground(s) of rejection in this Office 

action. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-25 are rejected under 35 U.S.C. 103(a) as being unpatentable over Tao 
Zhou, Exploring Netscape's Directory Server 3.0, April 1998, pages 1-11 (and Zhou 
hereinafter) in view of Microsoft, Active Directory Overview, posted June 30, 1999, 
pages 1-11 (and Microsoft hereinafter). 

As to claims 1 ,10,21 and 22, Zhou teaches a method for remote control for a 

networked application (i.e., "Figure l shows an example of how you might set up Directory server in an NT 
network." ... "If you use Netscape SuiteSpot server, such as Messaging Server or and LDAP-enabled application, 
the application server can authenticate users through Directory Server for application access. Directory Server also 
lets an LDAP client, such as Netscape's Directory Server Gateway, update and search LDAP directory information." 
. . . "LDAP-enabled applications no longer need separate user databases. They can singly audienticate users through 
the LDAP directory and store and look for user or application profiles in tfie directory." ... "A DIT often mirrors a 
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company's organizational hierarchy. For example, Figure 2 shows a directory tree for Acme, a fictitious company 
consisting of three organizational units (ous): Administration, Sales, and Products. When designing a DIT, you 
categorize directory entries into classes of objects. As Figure 2 shows, common object classes include organization 
(o), ou, and person (common name — cn). The object class specifies the required and optional attributes of the 
objects in that category and the rules governing how you can use the object when building the DIT structure." . . . 
"With this service, you can perform two-way synchronization of users, groups, and passwords between the LDAP 
directory and the NT domain directory." 
Fig. 1: 




Application User LDAP Client 



Fig. 2: 
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The preceding text excerpts and Figure 1 and Figure 2 clearly indicate that the directory server contains a 
hierarchical directory structure DIT, which contains an organizational hierarchy. The hierarchy may contain a 
plurality of persons including a person John Smith and all of the attributes associated with that cn. The hierarchical 
directory structure would contain how John Smith object is used within the company i.e., What John Smith can do 
within the organization e.g., what application John Smith has permission to access etc. The application receives user 
authentication data e.g., login data e.g., password for an application session and redirects to the directory server to 
be authenticated before giving permission to the user. The hierarchical tree can contain various en's under products 
ou i.e., organization unit. The various ens may be a various device products e.g., a networked printer. All of the 
attributes that indicates rules governing who and how the product object can be used. 2!liou does not explicitly teach 
or merely silent or singly does not give an example that the products are devices like printers. Although the 
application can be a networked printing application, which is a subset of applications. In that case, the user can 
control or configure our every day printing jobs from a networked printer and the prior art teaches all of the 
limitations of claim 1. But to be specific, Examiner states that Zhou does not teach providing and controlling access 
to the device control feature in the directory server.) (page 2; page 3; page 7; page 9; page 10), Comprising the 

acts of: receiving a request for a session with the networked application from a remote 
interface (page 2; page 3; page 7; page 9; page 10); redirecting the request from the networked 
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application to a directory server comprising user logins and access rights for a plurality 

of authorized users (page 2; page 3; page 7; page 9; page 10); 

Zhou does not explicitly teach providing and controlling access to the device 
control feature in the directory server. 

Microsoft teaches providing and controlling access to the device control feature 

in the directory server (i.e., "A directory service provides a place to store information about network-based 
entities, such as applications, files, printers, and people. It provides a consistent way to name, describe, locate, 
access, manage, and secure information about these individual resources." ... "Active Directory acts as the central 
authority for network security, letting the operating system readily verify a user's identity and control his or her 
access to network resources." ... "Active Directory uses objects to represent network resources such as users, 
groups, machines, devices, and applications. It uses containers to represent organizations, such as the marketing 
department, or collections of related objects, such as printers." ... 



As illustrated in Figure 2 above, object- and attribute-level security lets administrators precisely control 
access to information stored in the directory." ... "The Active Directory lets administrators assign access privileges 
for each attribute of the object, as well as for the entire object." ... "Reduces trips to the desktop. Automatically 
distributes software to users based on their role in the company, reducing or eliminating multiple trips that system 
administrators need to make for software installation and configuration." 
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"Active Directory also makes it easier for everyone to use the network. For example, users can directly 
query the directory for network resources such as printers. Since the directory can store attributes about objects, it 
can store the location and the capabilities of an organization's printers and expose these attributes as search criteria 
so the user can search for "printers in building 6 that print color" directly from the "Start" menu in Windows. 
What's more, the directory can refer the desktop operating system to all the configuration information it needs to set 
up a new printer-so when users find the printer they want, they can use it right way." ... "It improves password 
security and management." ... "It ensures desktop functionality. By locking-down desktop configurations and 
preventing access to specific client machine operations, such as software installation or registry editing, based on the 
role of the end user." The preceding text excerpts and the figures clearly indicate that the directory service provides 
and controls access to the device control feature based on user's role. Users are identified by their login name and 
password. For exanq)le, users can configure remotely networked printer device, install software etc. via the 
Directory Server. The notification, commands to configure printer devices or install software have to be transmitted 
to the device being configured or installed.) (page 1; page 2; page 4; page 5 ; page 6 ; page 7 ; page 8) 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include providing and controlling access to the device control feature in the directory 
server with the motivation to provide a place to store infomiation about network-based 
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entities, such as applications, files, printers, and people and also to provide a consistent 
way to name, describe, locate, access, manage, and secure information about these 

individual resources (Microsoft, page 1). 

As to claims 2, 8 and 15, Zhou teaches transmitting a command to the networiced 

application device via the directory server (page 2; page 3; page 7; page 9; page 10). 

Zhou does not explicitly teach transmitting a command based on the device 
control feature to the networi<ed device via the directory sen/er. 

Microsoft teaches transmitting a command based on the device control feature 

to the networked device via the directory server (page l; page 2; page 4; page 5 ; page 6 ; page 7 ; 
page 8). 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include transmitting a command based on the device control feature to the networked 
device via the directory server with the motivation to provide a place to store information 
about network-based entities, such as applications, files, printers, and people and also 
to provide a consistent way to name, describe, locate, access, manage, and secure 
infomiation about these individual resources (Microsoft, page i). 

As to claim 3, Zhou teaches a hierarchical directory stmcture based on 
organizational groups of the plurality of authorized users (page 2; page 3; page t, page 9; page 

10). 
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As to claims 4 and 12, Zhou does not teach that the act of providing the device 
control feature comprises the act of facilitating remote configuration of the networked 
device. 

l\4lcrosoft teaches that the act of providing the device control feature comprises 
the act of facilitating remote configuration of the networked device (page i; page 2; page 4; 

page 5 ; page 6 ; page 7 ; page 8). 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include that the act of providing the device control feature comprises the act of 
facilitating remote configuration of the networiced device with the motivation to provide a 
place to store information about network-based entities, such as applications, files, 
printers, and people and also to provide a consistent way to name, describe, locate, 
access, manage, and secure information about these Individual resources (Microsoft, page 
1). . « 

As to claims 5 and 13, Zhou does not explicitly teach that the act of providing the 
device control feature comprises the act of facilitating remote control of a management 
module disposed on the networked device. 

Microsoft teaches that the act of providing the device control feature comprises 
the act of facilitating remote control of a management module disposed on the 

networked device (page l; page 2; page 4; page 5 ; page 6 ; page 7 ; page 8). 
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It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include that the act of providing the device control feature comprises the act of 
facilitating remote control of a management module disposed on the networked device 
with the motivation to provide a place to store information about network-based entities, 
such as applications, files, printers, and people and also to provide a consistent way to 
name, describe, locate, access, manage, and secure information about these individual 

resources (Microsoft, page 1). 

As to claims 6 and 14, Zhou does not explicitly teach that the act of controlling 
access to the device control feature comprises the act of associating authorized user 
groups of the plurality of authorized users to the networked device. 

Microsoft teaches that the act of controlling access to the device control feature 
comprises the act of associating authorized user groups of the plurality of authorized 

users to the networked device (page l; page 2; page 4; page 5 ; page 6 ; page 7 ; page 8). 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include that the act of controlling access to the device control feature comprises the act 
of associating authorized user groups of the plurality of authorized users to the 
networked device with the motivation to provide a place to store information about 
network-based entities, such as applications, files, printers, and people and also to 
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provide a consistent way to name, describe, locate, access, manage, and secure 
information about these individual resources (Microsoft, page i). 

As to claim 7, Zhou teaches the act of providing an interface for the plurality of 

authorized users to interact with the directory Server (i.e., "Directory Server Manager, with this 
powerful administrative tool, you can manage all Directory Server components*, including LDAP directory database, 
the access control list (ACL), replication, the schema, and all directory server settings. Directory Server Manager is 
a Web based tool, but only a server administrator can connect to its interface.") (page 3; page 8). 

As to claim 9, Zhou does not explicitly teach the act of providing an interface for 
the networked device to retrieve a control task generated by the device control feature. 

Microsoft teaches the act of providing an interface for the networked device to 
retrieve a control task generated by the device control feature (page i; page 2; page 4; page 5 ; 

page 6 ; page 7 ; page 8; page 9). 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include the act of providing an interface for the networked device to retrieve a control 
task generated by the device control feature with the motivation to provide a place to 
store information about network-based entities, such as applications, files, printers, and 
people and also to provide a consistent way to name, describe, locate, access, manage, 
and secure information about these individual resources (Microsoft, page i). 
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As to claims 1 1 and 19, Zliou teaches the act of facilitating interaction comprises 
the act of providing a hierarchical directory structure based on groups of the plurality of 

authorized users (page 2; page 3; page 7; page 9; page 10). 

Zhou does not explicitly teach each of the groups having at least one of the 
plurality of networked devices. 

Microsoft teaches each of the groups having at least one of the plurality of 

networked devices (page l; page 2; page 4; page 5 ; page 6 ; page 7 ; page 8). 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include that each of the groups having at least one of the plurality of networked devices 
with the motivation to provide a place to store infonnatlon about network-based entities, 
such as applications, files, printers, and people and also to provide a consistent way to 
name, describe, locate, access, manage, and secure infomiation about these individual 

resources (Microsoft, page 1). 

As to claim 1 6, Zhou does not teach the act of transmitting the control task 
comprises the act of responding to a task request from the desired device. 

Microsoft teaches the act of transmlfting the control task comprises the act of 

responding to a task request from the desired device (i.e., a device needing software installation 
requires response from the directory server) (page 1; page 2; page 4; page 5 ; page 6 ; page 7 ; page 8). 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
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include the act of transmitting the control task comprises the act of responding to a tasl^ 
request from the desired device with the motivation to provide a place to store 
information about networl^-based entities, such as applications, files, printers, and 
people and also to provide a consistent way to name, describe, locate, access, manage, 
and secure information about these individual resources (Microsoft, page i). 

As to claim 17, Zhou teaches a system of remote control for a plurality of a 

networked application (i.e., "Figure l shows an example of how you might set up Directory server in an NT 
network." ... "If you use Netscape SuiteSpot server, such as Messaging Server or and LDAP-enabled application, 
the application server can authenticate users through Directory Server for application access-. Directory Server also 
lets an LDAP client, such as Netscape's Directory Server Gateway, update and search LDAP directory information." 
... "LDAP-enabled applications no longer need separate user databases. They can sinqjly authenticate users through 
the LDAP directory and store and look for user or application profiles in the directory." ... "A DIT often mirrors a 
company's organizational hierarchy. For exan^le, Figure 2 shows a directory tree for Acme, a fictitious company 
consisting of three organizational units (ous): Administration, Sales, and Products. When designing a DIT, you 
categorize directory entries into classes of objects. As Figure 2 shows, common object classes include organization 
(o), ou, and person (common name — cn). The object class specifies the required and optional attributes of the 
objects in that category and the rules governing how you can use die object when building the DIT structure." . . . 
"With this service, you can perform two-way synchronization of users, groups, and passwords between the LDAP 
directory and the NT domain directory." 
Fig. 1: 
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The preceding text excerpts and Figure 1 and Figure 2 clearly indicate that the directory server contains a 
hierarchical directory structure DIT, which contains an organizational hierarchy. The hierarchy may contain a 
plurality of persons including a person John Smith and all of the attributes associated with that cn. The hierarchical 
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directory structure would contain how John Smith object is used within the company i.e.. What John Smith can do 
within the organization e.g., what apphcation John Smith has permission to access etc. The application receives user 
authentication data e.g., login data e.g., password for an application session and redirects to the directory server to 
be authenticated before giving permission to the user. The hierarchical tree can contain various en's under products 
ou i.e., organization unit. The various ens may be a various device products e.g., a networked printer. All of the 
attributes that indicates rules governing who and how the product object can be used. Therefore, there is 
communication between a client (i.e. a remote console), the directory server and the plurality of networked 
applications at the application server. The applications communicate to each other through application interface or 
api. Zhou does not explicitly teach or merely silent or sinq)ly does not give an exanple that the products are devices 
like printers. Although the application can be a networked printing application, which is a subset of applications. In 
that case, the user can control or configure our every day printing jobs from a networked printer and the prior art 
teaches all of the limitations of claim 1. But to be specific. Examiner states that Zhou does not teach providing and 
controlling access to the device control feature in the directory server.) (page 2; page 3; page 7; page 9; page 10) 

, comprising: a directory server (page 2; page 3; page 7; page 9; page 10), comprising: a user 
database comprising user login data for each of a plurality of authorized users (i.e., the 

LDAP directory database; The Applicant as well as Zhou does not teach separate databases for the resource, users 
etc. The same database incorporates all of these data. The examiner could not fmd separate databases in the 
specification.) (page 2; page 3; page 7; page 9; page 10); B reSOUrce database comprising 

identification data for the plurality of networked application (i.e., the ldap directory database; 

The Applicant as well as Zhou does not teach separate databases for the resource, users etc. The same database 
incorporates all of these data. The examiner could not fmd separate databases in the specification.) (page 2; page 3; 

page 7; page 9; page 10); a resource access control database comprising access rights to the 
networked applications for each of the plurality of authorized users, wherein the access 
rights comprise a first right for a first user to setup a control task and a second right for a 

second user to modify the control task (i.e., the ldap directory database; The Applicant as well as 
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Zhou does not teach separate databases for the resource, users etc. The same database incorporates all of these data. 
The examiner could not find separate databases in the specification. In the database, various users fall under 
different cn. For example one user is admin therefore has administration authority and can setup or modify 
application. Other user may have different role and therefore has different access permission to use the application.) 
(page 2; page 3; page 7; page 9; page 10); a directory Structure (page 2; page 3; page 7; page 9; page 10) for 

the resource database (page 2; page 3; page 7; page 9; page 10); and an interface for the directory 
structure (page 2; page 3; page 7; page 9; page 10) adapted to facilitate interaction between the 
directory server, a remote console, and the plurality of networked applications (page 2; 

page 3; page 7; page 9; page 10). 

Zhou does not explicitly teach a system of remote control for a plurality of a 
networked devices; a resource data storage comprising identification data for the 
plurality of networked devices; a device management system for the plurality of 
networked devices; and an interface for the directory structure adapted to facilitate 
interaction between the directory server, a remote console, and the plurality of 
networked devices. 

Microsoft teaches a system of remote control for a plurality of a networked 

devices (i.e., "A directory service provides a place to store information about network-based entities, such as 
applications, files, printers, and people. It provides a consistent way to name, describe, locate, access, manage, and 
secure information about these individual resources." ... "Active Directory acts as the central authority for network 
security, letting the operating system readily verify a user's identity and control his or her access to network 
resources." ... "Active Directory uses objects to represent network resources such as users, groups, machines, 
devices, and applications. It uses containers to represent organizations, such as the marketing department, or 
collections of related objects, such as printers." ... 
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As illustrated in Figure 2 above, object- and attribute-level security lets administrators precisely control 
access to information stored in the directory." ... "The Active Directory lets administrators assign access privileges 
for each attribute of the object, as well as for the entire object." ... "Reduces trips to the desktop. Automatically 
distributes software to users based on their role in the conpany, reducing or eliminating multiple trips that system 
administrators need to make for software installation and configuration." 
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"Active Directory also makes it easier for everyone to use the network. For example, users can directly 
query the directory for network resources such as printers. Since the directory can store attributes about objects, it 
can store the location and the capabilities of an organization's printers and expose these attributes as search criteria 
so the user can search for "printers in building 6 that print color" directly from the "Start" menu in Windows. 
What's more, the du-ectory can refer the desktop operating system to all the configuration information it needs to set 
up a new printer-so when users find the printer they want, they can use it right way." ... "It improves password 
security and management." ... "It ensures desktop functionality. By locking-down desktop configurations and 
preventing access to specific client machine operations, such as software installation or registry editing, based on the. 
role of the end user." The preceding text excerpts and the figures clearly indicate that the directory service provides 
and controls access to the device control feature based on user's role. Users are identified by their login name and 
password. For example, users can configure remotely networked printer device, install software etc. via the 
Directory Server. The notification, commands to configure printer devices or install software have to be transmitted 
to the device being configured or installed. The remote chent console application, the directory server application 
and the networked device e.g., printer communicate to each other using application interface as any other 
applications communicate.) (page 1; page 2; page 4; page 5 ; page 6 ; page 7 ; page 8); a reSOUrce data 

Storage comprising identification data for the plurality of networked devices (page i; page 2; 
page 4; page 5 ; page 6 ; page 7 ; page 8; a device management system for the plurality of 
networked devices (page i; page 2; page 4; page 5 ; page 6 ; page 7 ; page 8; and an interface for the 
directory structure adapted to facilitate interaction between the directory server, a 
remote console, and the plurality of networked devices (page i; page 2; page 4; page 5 ; page 6 ; 

page 7 ; page 8. 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include a system of remote control for a plurality of a networked devices; a resource 
data storage comprising identification data for the plurality of networked devices; a 
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device management system for the plurality of networked devices; and an interface for 
the directory structure adapted to facilitate interaction between the directory server, a 
remote console, and the plurality of networked devices with the motivation to provide a 
place to store information about network-based entities, such as applications, files, 
printers, and people and also to provide a consistent way to name, describe, locate, 
access, manage, and secure information about these individual resources (Microsoft, page 

1). 

As to claim 18, Zhou teaches resource access control database containing 

access rights (page 2; page 3; page 7; page 9; page 10). 

Zhou does not explicitly teach that the access rights of the resource access 
control data storage comprise device rights and restrictions to manage each of the 
plurality of networked devices with the device management system. 

Microsoft teaches that the access rights of the resource access control data 
storage comprise device rights and restrictions to manage each of the plurality of 
networked devices with the device management system (page i; page 2; page 4; page s ; page 6 ; 

page 7 ; page 8). 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include that the access rights of the resource access control data storage comprise 
device rights and restrictions to manage each of the plurality of networked devices with 
the device management system with the motivation to provide a place to store 
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information about networl^-based entities, such as applications, files, printers, and 
people and also to provide a consistent way to name, describe, locate, access, manage, 
and secure infomnation about these individual resources (Microsoft, page i). 

As to claim 19, Zhou teaches that the directory structure comprises a plurality of 
organizational groups associated with at least one of the plurality of networked 

applications (page 2; page 3; page 7; page 9; page 10). 

Zhou does not explicitly teach that the directory structure comprises a plurality of 
organizational groups associated with at least one of the plurality of networked devices. 

Microsoft teaches that the directory structure comprises a plurality of 
organizational groups associated with at least one of the plurality of networked devices 

(page 1 ; page 2; page 4; page 5 ; page 6 ; page 7 ; page 8). 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include that the directory structure comprises a plurality of organizational groups 
associated with at least one of the plurality of networked devices with the motivation to 
provide a place to store information about network-based entities, such as applications, 
files, printers, and people and also to provide a consistent way to name, describe, 
locate, access, manage, and secure information about these individual resources 

(Microsoft, page 1). 
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As to claim 20, Zhou does not explicitly teach that the device management 
system comprises a plurality of control functions for each of the plurality of networked 
devices. 

Microsoft teaches that the device management system comprises a plurality of 
control functions for each of the plurality of networked devices (page i; page 2; page 4; page s ; 

page 6 ; page 7 ; page 8). 

It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
include that the device management system comprises a plurality of control functions 
for each of the plurality of networked devices with the motivation to provide a place to 
store information about network-based entities, such as applications, files, printers, and 
people and also to provide a consistent way to name, describe, locate, access, manage, 
and secure infonmation about these individual resources (Microsoft, page i). 

As to claims 23 and 24, Zhou teaches that granting the right to control the task 
comprises enabling setup and modification of the task (page 2; page 3; page 7; page 9; page lO). 

As to claim 25 Zhou does not explicitly teach that the task comprises installing 
software. 

Microsoft teaches that the task comprises installing software (page i ; page 2; page 4; 

page 5 ; page 6 ; page 7 ; page 8). 
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It would have been obvious to a person of ordinary skill in the art at the time of 
Applicant's invention to modify the teachings of Zhou with the teachings of Microsoft to 
Include that the task comprises installing software with the motivation to provide a place 
to store Information about network-based entities, such as applications, files, printers, 
and people and also to provide a consistent way to name, describe, locate, access, 
manage, and secure information about these individual resources (Microsoft, page i). 

Conclusion 

4. THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is reminded 
of the extension of time policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Points of Contact 

5. Any Inquiry conceming this communication or earlier communications from the 
examiner should be directed to Apu M. Mofiz whose telephone number is (571) 272- 
4080. The examiner can nomially be reached on Monday - Thursday 8:00 A.M. to 4:30 
P.M. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Dov PopovicI can be reached at (571) 272-4083. The fax numbers for the 
group is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application should 
be directed to the Group receptionist whose telephone number is (703) 305-9600. 
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